{"ip":"135.233.112.103","total_events":124,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"strechoid","confidence":"high","network_type":"CDN"},"first_seen":"2026-02-28T14:51:39","last_seen":"2026-06-23T06:26:43","events_24h":0,"events_7d":7,"geo":{"country_code":"US","country_name":"United States","region":"Iowa","city":"Des Moines","lat":41.6015,"lon":-93.6127,"asn":8075,"org":"Microsoft Corporation"},"source_domain":"azpdcs7c64su.stretchoid.com","known_scanners":["strechoid","Stretchoid"],"scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"research","url":"https://www.stretchoid.com/"},"cve_matches":[],"top_ports":[{"port":541,"proto":"tcp","label":"","count":6},{"port":32400,"proto":"tcp","label":"","count":5},{"port":6667,"proto":"tcp","label":"IRC","count":4},{"port":8009,"proto":"tcp","label":"","count":4},{"port":5007,"proto":"tcp","label":"","count":4},{"port":25565,"proto":"tcp","label":"Minecraft","count":4},{"port":443,"proto":"tcp","label":"HTTPS","count":4},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":4},{"port":8889,"proto":"tcp","label":"","count":4},{"port":631,"proto":"tcp","label":"IPP","count":4},{"port":102,"proto":"tcp","label":"","count":4},{"port":8083,"proto":"tcp","label":"","count":4},{"port":8899,"proto":"tcp","label":"","count":4},{"port":2222,"proto":"tcp","label":"SSH-alt","count":4},{"port":4332,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t12i130500_2d7513195f68_e51b7354d87f"],"tls_ja3":["cba7f34191ef2379c1325641f6c6c4f4"],"ja4h":["ge11nn0400_88d30a62b7ad","po11nn0600_ed383ed8462e"]},"fingerprint_peers":{"t12i130500_2d7513195f68_e51b7354d87f":2671,"po11nn0600_ed383ed8462e":350,"ge11nn0400_88d30a62b7ad":7736},"user_agents":["Mozilla/5.0 zgrab/0.x"],"timeline":[{"date":"2026-03-31","count":1},{"date":"2026-04-01","count":2},{"date":"2026-04-02","count":2},{"date":"2026-04-03","count":6},{"date":"2026-04-04","count":3},{"date":"2026-04-10","count":5},{"date":"2026-04-12","count":2},{"date":"2026-04-13","count":4},{"date":"2026-04-15","count":2},{"date":"2026-04-18","count":1},{"date":"2026-04-19","count":2},{"date":"2026-04-20","count":8},{"date":"2026-04-21","count":2},{"date":"2026-04-27","count":3},{"date":"2026-04-28","count":4},{"date":"2026-05-01","count":2},{"date":"2026-05-02","count":2},{"date":"2026-05-03","count":3},{"date":"2026-05-09","count":1},{"date":"2026-05-11","count":1},{"date":"2026-05-13","count":1},{"date":"2026-05-16","count":2},{"date":"2026-05-21","count":1},{"date":"2026-05-22","count":1},{"date":"2026-05-29","count":4},{"date":"2026-05-31","count":3},{"date":"2026-06-04","count":2},{"date":"2026-06-10","count":1},{"date":"2026-06-14","count":2},{"date":"2026-06-18","count":3},{"date":"2026-06-20","count":2},{"date":"2026-06-22","count":2},{"date":"2026-06-23","count":3}],"recent_events":[{"timestamp":"2026-06-23T06:26:43","port":1337,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1337\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313333370a","method":"","user_agent":"","community_id":"1:6ev0lVwBQpq2D2sRVr+TKjBVGaI=","ja3":"","session":"91a77f56-2772-4d51-887e-71efabfa0203","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"67786f48dc1d63e4","strings":["MGLNDD_<HONEYPOT>_1337"]}},{"timestamp":"2026-06-23T02:05:06","port":10024,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_10024\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31303032340a","method":"","user_agent":"","community_id":"1:9Wd73qCq4lLBfNA9b60btY4bDNE=","ja3":"","session":"f7132d69-ead7-4dee-84de-ca37e68cfc25","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":15,"enriched":{"digest":"35986cf52561bc18","strings":["MGLNDD_<HONEYPOT>_10024"]}},{"timestamp":"2026-06-23T02:05:01","port":10024,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:10024\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","tls_version":"TLSv1.2","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31303032340d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","community_id":"1:xk2/gS/Ucr04PLCInZdIPB7D9Mg=","ja3":"cba7f34191ef2379c1325641f6c6c4f4","session":"cb05dd15-c193-428e-86b6-ef24b9407913","seq":1,"duration_ms":135,"bytes_in":115,"bytes_out":80},{"timestamp":"2026-06-22T17:18:10","port":83,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_83\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f38330a","method":"","user_agent":"","community_id":"1:dCgkjzcuQ2JlyyxZRtuOOrQT56I=","ja3":"","session":"616c71a7-ba50-44d9-821d-de61db25db94","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"8ad9727fb727a49b","strings":["MGLNDD_<HONEYPOT>_83"]}},{"timestamp":"2026-06-22T17:18:05","port":83,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38330d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 zgrab/0.x","community_id":"1:jVAR3u/O/V/Hspzh2fo7x2F2Hgg=","ja3":"","session":"f090090a-45fe-4cd5-8666-525dbc3cd897","seq":1,"duration_ms":100,"bytes_in":114,"bytes_out":80},{"timestamp":"2026-06-20T09:13:23","port":8981,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8981\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383938310a","method":"","user_agent":"","community_id":"1:UsaRWlP2NxOYYGSNJPI0Np5jYX4=","ja3":"","session":"a7fdfdfe-baa0-44b7-82e8-f4179e0b5777","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":15,"enriched":{"digest":"1a213eecbdf1f275","strings":["MGLNDD_<HONEYPOT>_8981"]}},{"timestamp":"2026-06-20T09:13:23","port":8981,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:upcrldBADWBwyTI0kkYGooxdZ/U=","ja3":"","session":"d27b4bff-ad93-4a36-9cdb-1c63e066e3b5","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":15},{"timestamp":"2026-06-18T14:43:39","port":27018,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_27018\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f32373031380a","method":"","user_agent":"","community_id":"1:Wjw/wuFSjKiRQZ98LGRKqE9sSxM=","ja3":"","session":"47113367-397a-4d79-920a-5efb504cb582","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":15,"enriched":{"digest":"cd0ef6ab115b9376","strings":["MGLNDD_<HONEYPOT>_27018"]}},{"timestamp":"2026-06-18T08:45:13","port":631,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_631\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3633310a","method":"","user_agent":"","community_id":"1:botoBF6FCQUvQ1XKfu296Saf4xU=","ja3":"","session":"8f8bbe2f-9ff2-46f9-abfa-e1365ff29a97","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"4ae9491bb6b1ff95","strings":["MGLNDD_<HONEYPOT>_631"]}},{"timestamp":"2026-06-18T08:45:12","port":631,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"content-length\":\"146\",\"content-type\":\"application/ipp\",\"host\":\"<HONEYPOT>:631\",\"user-agent\":\"Mozilla/5.0 zgrab/0.x\"}","body":"\u0002\u0001\u0000\u000b\u0000\u0000\u0000\u0001\u0001G\u0000\u0012attributes-charset\u0000\u0005utf-8H\u0000\u001battributes-natural-language\u0000\u0005en-usE\u0000\u000bprinter-uri\u0000\u001bipp://<HONEYPOT>:631/ippD\u0000\u0014requested-attributes\u0000\u0003all\u0003","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/ipp","summary":"","payload_hex":"504f5354202f69707020485454502f312e310d0a486f73743a20<HONEYPOT>3a3633310d0a557365722d4167656e743a204d6f7a696c6c612f352e30207a677261622f302e780d0a436f6e74656e742d4c656e6774683a203134360d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6970700d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a0201000b0000000101470012617474726962757465732d6368617273657400057574662d3848001b617474726962757465732d6e61747572616c2d6c616e67756167650005656e2d757345000b7072696e7465722d757269001b6970703a2f2f<HONEYPOT>3a3633312f6970704400147265717565737465642d617474726962757465730003616c6c03","method":"POST","user_agent":"Mozilla/5.0 zgrab/0.x","community_id":"1:ZpjNhzDsM0IF2eb+luGoZpZmm/Q=","ja3":"","session":"19a4b523-9932-4acc-b710-5cb8c8ede2c2","seq":1,"duration_ms":100,"bytes_in":316,"bytes_out":80}],"http_methods":[{"method":"GET","count":13},{"method":"POST","count":1}],"distinct_ports_total":48,"top_paths":[{"path":"/","count":10,"ports":9},{"path":"/ipp","count":1,"ports":1},{"path":"/actuator/health","count":1,"ports":1},{"path":"/setup/eureka_info","count":1,"ports":1},{"path":"/developmentserver/metadatauploader","count":1,"ports":1}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Content-Length","Content-Type","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Content-Length","value":"146","notable":false},{"name":"Content-Type","value":"application/ipp","notable":true},{"name":"Host","value":"<HONEYPOT>:631","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 zgrab/0.x","notable":false}],"distinct_sets":2,"events_with_headers":3},"tags":[],"data_as_of":"2026-06-25T15:32:47.610655+00:00"}